a Futurum company
Subscribe

Contributor

Tom Smith

Tom Smith (C. Thomas Smith III) is a veteran digital analyst and content strategist who spent more than four years as a Research Analyst at DZone.com (part of Devada), where he conducted thousands of interviews with technology executives and authored roughly 1,500 articles that generated more than 10 million page views across topics including AI/ML, Agile, APIs, cloud computing, DevOps, IoT, Java, Kubernetes, microservices, and security. He holds an MBA in Marketing from Duke University's Fuqua School of Business and a B.A. in Political Science from Duke. Smith later worked as a content strategist and technical writer at Cognizant, including stints on Google's Bard (now Gemini) and Meta's AI Business Assistant (MAIBA) "seed" content teams, where he helped train and evaluate large language models. Over his career, he has interviewed more than 4,000 technology executives across AI, cloud, data, security, and storage sectors. He now writes independently through Insights From Analytics and is a contributing writer across multiple Techstrong Group properties, including DevOps.com, Digital CxO, Cloud Native Now, PlatformEngineering.com, and Techstrong.ai, where he covers AI agents, enterprise AI infrastructure, and emerging developer tools.

24Articles shown
1Contributors shown
2Archive page
Blogs

GitHub Puts Guardrails on Copilot’s Sandbox Inside JetBrains IDEs

JetBrains IDEs are where a lot of enterprise backend work happens — Java, Kotlin, Spring, big monorepos with a lot to break. So when an AI coding agent starts running shell commands inside that environment, the question isn’t whether it’s useful. It’s what happens if it touches the wrong file, the wrong network path, or […]

Tom Smith · Sep 9, 2026
Blogs

Rust’s First Debugging Survey Shows Most Developers Skip the Debugger Entirely

Most Rust developers don’t use a debugger. That’s the headline finding from the Rust compiler team’s first dedicated debugging survey, and it’s worth sitting with for a second. Rust has spent years building a reputation as the language that catches your mistakes before you ship them. The compiler is famously strict. The type system is […]

Tom Smith · Sep 9, 2026
DevOps and Open Technologies

npm v12 Shuts Down a Popular Malware Trick — But the Threat Isn’t Going Away

For years, one of the easiest ways to sneak malware onto a developer’s machine has been to hide in plain sight. Install a package from npm, and any lifecycle script bundled with it runs automatically — no review, no approval, no second look. Attackers have known this for a long time, and they’ve used it […]

Tom Smith · Aug 20, 2026
Blogs

GitHub Sharpens CodeQL’s Eye on Actions Workflows and Modern JavaScript

GitHub Actions pipelines have become one of the quieter attack surfaces in software development. They pull in third-party actions, cache dependencies, and pass secrets between jobs, often without anyone reviewing the workflow file as closely as they’d review application code. That gap is exactly where cache-poisoning and output-clobbering attacks live, and it’s why GitHub keeps […]

Tom Smith · Aug 20, 2026
AI

LangChain’s dcode Isn’t New. Its Governance Play for Sensitive Code Is

Enterprises are running into the same wall with AI coding agents: the tools that write code fastest are usually the ones IT trusts least with sensitive codebases. Legacy modernization projects — COBOL migrations, .NET upgrades, decade-old frameworks nobody wants to touch by hand — are exactly where agentic coding tools could help most, and exactly […]

Tom Smith · Aug 19, 2026